Threats tagged 'ghsa-r3wq-9jj5-78cc'

Cudy TR3000 devices running firmware versions before 2.5.42 have an OS command injection vulnerability. This flaw allows a malicious or compromised Auto Configuration Server (ACS) to execute arbitrary commands as root by sending a specially crafted SetParameterValues request with shell metacharacters in the User.Username parameter. The vulnerability arises because the username value is passed without validation to an os.execute() call in the device's Lua script, leading to root-level command execution.